{
  "status": "Verified",
  "completedAtUtc": "2026-09-12T00:14:30.1949846Z",
  "temporaryUsersRemoved": 5,
  "temporaryRoleAssignmentsRemoved": 4,
  "delegatedGrantsRemoved": 4,
  "temporaryApplicationsRemoved": 1,
  "temporaryServicePrincipalsRemoved": 1,
  "temporaryCredentialFilesRemoved": 16,
  "verification": [
    {
      "name": "All evidence client delegated grants absent",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": 0
    },
    {
      "name": "applications evidence client absent",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Existing manual CA policy remains disabled",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Fixture absent: ordinary-target",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Fixture absent: privileged-target",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Fixture absent: security-admin",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Fixture absent: security-operator",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Fixture absent: soc-responder",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "No Security Copilot capacity",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": 0
    },
    {
      "name": "Original groups retained",
      "passed": true,
      "roleCount": null,
      "groupCount": 10,
      "count": null
    },
    {
      "name": "Original role assignments retained; temporary assignments absent",
      "passed": true,
      "roleCount": 5,
      "groupCount": null,
      "count": null
    },
    {
      "name": "Security Defaults remains enabled",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "servicePrincipals evidence client absent",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    },
    {
      "name": "TAP configuration preserved",
      "passed": true,
      "roleCount": null,
      "groupCount": null,
      "count": null
    }
  ],
  "boundary": "Five test users were disabled, sessions revoked, and soft-deleted. No permanent purge. API and screenshot evidence retained separately."
}